Secrets supports multiple/all scenarios for managing secrets during deployment

local secrets into environment
secrets manager
xcloud_secrets plugin
allow access to kms xevo-global encryption from any Xevo account?