Commit multiple encrypted secrets files and decrypt only the one appropriate for the current environment.
Jesse Kipp
MIT