Anyone using Salt Stack [https://www.saltstack.com/] should be familiar with using secure pillar files. If not, here is a basic intro [https://github.com/Everbridge/generate-secure-pillar/wiki/Setting-up-a-Salt-Master-with-GPG-for-secure-pillar] I created for setting it up. Using the secure pillar can prove a challenge for folks who aren't familiar with