im not certain why any of that is at odds with providing secure secret management to employees

it's already a part of secret management for machines in secure cloud environments