: Always ensure that block and file storage for your secrets is encrypted at the cluster or storage class level.

The .secrets file must only exist on your local machine (or a secure production server). It must be committed to Git version control.