[dmatech]

https://dns.he.net/ does. Each record can have its own secret. You can also use this for things like A records to do dynamic DNS.