Imagine you’re looking to build a service or application which connects to an external service via access keys, or credentials. How do you plumb those into your application? Do you know if your secrets are really secret?