Jokes on you, a team I work with split their creds into multiple pieces, concatenate them where needed in their bootstrap, and committed then as plaintext in their repo.