I’ve been using sops: https://github.com/getsops/sops