I use Ansible Vault to deploy environment-specific configuration files which contain sensitive information and are version-controlled separately from the corres

I use Ansible Vault to deploy environment-specific configuration files which contain sensitive information and are version-controlled separately from the corresponding projects themselves. The group who has access to the Ansible Vault data is much smaller and is already responsible for managing other similar types of sensitive data. While this method ultimately just moves the problem to another location, it seems more sensible to me, at least for my purposes.