We're building something similar for https://harrow.io/ https://harrow.io/ which acts as the secret store, it's a Redis API compatible database with a strong au

We're building something similar for https://harrow.io/ https://harrow.io/ which acts as the secret store, it's a Redis API compatible database with a strong auditing layer, and baked in crypto, it requires a single key to start and unlock the server, but we didn't know how to split the key to keep the secrets out of a single dev's hands. Now that we do, we'll build something based on the SSS algorithm and YubiKeys (which we use for all other tokens)