Vaulted Secrets Without Git Churn