ISTM secrets should mostly be generated where they&#x27;re needed and should not leave that location. If two locations need to interact then use asymmetric keys so that the public key may be shared. Of course such a system must be bootstrapped, but suitable arrangements will make that a relatively rare manual process.<p>Of course exceptions might be made for any number of operational reasons but I think it helps to at least <i>aim</i> for the right thing even if it isn&#x27;t always possible. Secrets in VCS seems to be a shot in exactly the opposite direction.