[StavrosK]

I quite like git-crypt for secrets, I store them in a single place (eg as environment variables) and encrypt that.