{
  # Until we get some kind of KMS operational, store secrets in the state file.
  terraform.required_providers.secret = {
    version = "~> 1.2.1";
    source = "numtide/secret";
  };
}