Comment by majkinetor

You think PI could use polling to determine when to deploy ?

SSH/VPN all have the same problem - you need to give secret to remote infrastructure

> for secrets in Keybase i think repos are better since its not as easy to mistakenly delete the files ?

Good observation, having historic secrets could also be used as a feature.