Anyone using Salt Stack [https://www.saltstack.com/] should be familiar with
using secure pillar files. If not, here is a basic intro
[https://github.com/Everbridge/generate-secure-pillar/wiki/Setting-up-a-Salt-Master-with-GPG-for-secure-pillar]
I created for setting it up.
Using the secure pillar can prove a challenge for folks who aren't familiar with