[drewcoo]

That moves the problem to "how do we securely manage shared keys."

And it adds "how safe are those encrypted secrets [edit: changed from "keys" to more general language] that are committed?" and "what about previous revisions . . . because it's version control?" and "are we sure we're managing offboarding securely?"

There are probably other concerns but those are the ones the immediately shout at me.

[hk1337]

Keybase.io was a good option at one point

[porridgeraisin]

Curious, what happened to keyvase?

[jakejarvis]

Acquired by Zoom (yes, that Zoom) and left to rot. A huge loss for the internet IMO. :(