I know vendors secret stores are better.
But what do I do that isn’t vendor-locked and is remotely as simple as environment variables?
use pass.
