It sounds complicated, but if you have decent abstractions, this kind of stuff is actually pretty easy to accomplish. I'd be interested in seeing any end-to-en

It sounds complicated, but if you have decent abstractions, this kind of stuff is actually pretty easy to accomplish. I'd be interested in seeing any end-to-end examples of how people are doing this in practice. For example, suppose you're maintaining a SaaS application and you have a private key to access some third party API that certain parts of your back end code need. How do you automate this process, so you change your private key on a regular schedule and update all affected hosts so your application code picks up the new one? Ideally this needs to avoid introducing risks like a single point of failure, a new attack surface, or the possibility of losing access to the API altogether if something goes wrong. Assuming the old key is immediately invalidated when you request a new one via some API, you also need a real time way of looking up the current active key from any of your application hosts when they need it, again without creating single points of failure, etc. No doubt this could be done with enough work, but it doesn't feel like a trivial problem.