Keeping credentials and keys out of source control and pipeline logs, while still letting automation use them.
Reference Q&A for this concept is coming soon.