I have been using envio for a while, as a simple way to avoid keeping secrets around in plain text. Secrets can be encrypted with a passphrase or a GPG key. Not a silver bullet but better than just keeping everything in a .env file.
https://github.com/humblepenguinn/envio