zie

Alternatively, just use Hashicorp vault (https://vaultproject.io)

caust1c
Or chamber.

https://github.com/segmentio/chamber