Berglas is great in that regard, as you can keep the unique names to the sensitive data in version control, but have the actual values sit in behind an acl in a secure location.

You’re able to guard secretes as need, but keep the audit-ability of version control.