If you don’t use a secret management tool, you’re doing it wrong