Options:

• 43% I use a CaC feature (Ansible Vault, Databags, etc)
• 0% I store them in Terraform state in clear
• 0% I store them in OpenTofu encrypted state
• 100% I store them in a secret manager (Hashicorp Vault, OpenBao, Bitwarden Secret Manager, Conjur...)
• 14% I generate secrets locally
• 0% I use something else (please comment)