&gt; The problem is you need some repository to store this information<p>This doesn&#x27;t have to be a Git repository, nor does it have to be the same repository as the code which uses the secrets.<p>&gt; it&#x27;s incredibly helpful to store the configuration along with the code<p>It&#x27;s helpful, but ultimately means that the ciphertext is potentially available to the world and existing keys may decipher it in perpetuity. Thus this is not a recommended tradeoff to make.