Is there a secret provisioning solution, that only does the provisioning part? I'd like to keep my secrets in git-crypt at rest.