Comment by rowanG077

Doesn't git crypt solve this? You can have encrypted blobs in a repo that will be auto decrypted if you have a working key.