Store secrets encrypted. Load them into projects, CI, and the CLI. The database never sees plaintext.
