I think things like onecli are the direction we will take. The secrets and state will be proxied api calls.