Why should secrets be built in? What's the issue with tool use and something like 1password's or Vault's CLI?