This would be great. Then we could reliably use something like vault to store secrets with individual acls per-workflow, and have reasonable confidence that only that single workflow can access them.
Why not give us some signed JWTs for external authentication.
Secrets is only good for legacy systems.