That moves the problem to "how do we securely manage shared keys." And it adds "how safe are those encrypted secrets [edit: changed from "keys" to more general

That moves the problem to "how do we securely manage shared keys." And it adds "how safe are those encrypted secrets [edit: changed from "keys" to more general language] that are committed?" and "what about previous revisions . . . because it's version control?" and "are we sure we're managing offboarding securely?" There are probably other concerns but those are the ones the immediately shout at me.