Been there, done that. If you want to be secure, you need to enforce key rotation within a secure timeframe, whatever that means in your threat model use vault,

Been there, done that. If you want to be secure, you need to enforce key rotation within a secure timeframe, whatever that means in your threat model use vault, kms or something similar to automatically rotate secrets. Then, leaking credentials will be inconsequential.