Why not integrate with KeePass(*)-family of secret stores or HashiCorp Vault?
Vault can be a huge lift and doesn't make sense for many projects - we wanted to build a tool that makes sense from day one, even when there is no backing provider, but can grow with your team and change providers seamlessly.