Add encrypted secrets
#28038

kaspth wants to merge kaspth:encrypted-secrets into rails:master

We do not currently have an analysis of these two commits