SSH/VPN all have the same problem - you need to give secret to remote infrastructure
> for secrets in Keybase i think repos are better since its not as easy to mistakenly delete the files ?
Good observation, having historic secrets could also be used as a feature.