// Package secrets defines provider-neutral references to protected runtime
// credentials. It never contains plaintext secret values.
package secrets