You want to secure your secrets in a central store like Vault, and make it easy to configure which secrets your application has access to. Even better is a way to be able to configure your app via the environment, and fall back to a secret storage service like Vault!

SecretGarden https://github.com/dkastner/secret_garden makes it easy to declaratively configure secret access in development, test, staging and production using a Secretfile.

We use it to access all secrets at http://www.faraday.io/