Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools. Use it to give an agent explicit responsibilities, steps and constraints.