We definitely avoid this approach. Fine grained access control per secret per environment is impossible. We use explicit secret management software.