secretctl

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.