Ask HN: How do you manage secrets with many agents?

<Rant> I typically 4 or more agents in different clones of the same project (NO worktrees, clones). And as project goes on, inevitably one of the agents needs to rotate/add/delete keys and since that change isn't tracked in the source, i have to, for the 100th time tell Codex to "Please find and sync that key you need from sibling folders".

There HAS to be a solution for this and symlinking key file to ../secrets doesn't work because agents (for some reason) trip over the fact that .env.local is a symlink and not a pure text file.

</Rant>

Is there a solution for this? What do you use to solve this?