Big fan of sops after previously using transcrypt. The latter was really painful for git newbies, painful to upgrade, and we've even ran into issues with differ

Big fan of sops after previously using transcrypt. The latter was really painful for git newbies, painful to upgrade, and we've even ran into issues with differing versions of openssl on client machines. sops is more contstrained but is generally easier to grok. It also integrates with GCP KMS which is super nice for us.