I generally like Vault, but on top of being a bit overwhelming to set up, it's also quite expensive to run in a HA setup.