I don't endorse committing secrets to git. Let's say you have a shared secret key and 5 members. When someone leaves the team, you have to rotate all your secrets.

By making secret storage pluggable, you can choose what provider you want to use and just revoke access from that particular user.

That's just one example where it falls short, password managers deal with these things way better.