We don't store things that are actually secret, as k8s secrets ;-) Hashicorp Vault is quite good at this.