This is certainly the case, however for an organization implementing best practices for code deployment, such a change would have to be peer-reviewed in the best case, or pushed directly to master with an obvious paper trail in the worst. It wasn&#x27;t my intention to imply that employing well-designed envelope encryption would shut the door on any possibility of an engineer gaining access to secrets; clearly there&#x27;s a lot more involved in making that happen. However, this goes a long way to allowing the source of any leaks to be traced should they occur.