I didn't know about envwarden till you mentioned it here.

We migrated from bitwarden to offline client machine for the reason that we didn't wanted a copy of our encryption key be available anywhere else online.