I’ll add onto this: if at all possible, secrets should be short lived and rotated reasonably often. Given enough time and enough secrets, it becomes asymptotic

I’ll add onto this: if at all possible, secrets should be short lived and rotated reasonably often. Given enough time and enough secrets, it becomes asymptotically likely that a secret will become exposed. Ensuring that those secrets expire quickly is a good way to mitigate this.