In chezmoi you can use gpg encryption: https://www.chezmoi.io/user-guide/encryption/