Managing secrets in your automation is always hard. I think it's critically important that your tooling support it as a first class thing, letting you do the safe and secure thing by default. Here is our first pass at that in SI: systeminit.com/blog-its-a-sec…