We have a keepaas file that has the passwords for a number of client resources. The clients don’t roll their passwords very often.