Some secret management belongs in your HTTP proxy - exe.dev blog
blog.exe.dev
do third-party integrations via HTTP header management