Neat! I like that it maintains everything in the same file. No need to mess with .gitignore

Have you tried BlackBox?

Projects like https://github.com/StackExchange/blackbox have the benefit of using GPG group encryption. Each person has their own secret key but any one key can decrypt the file. This makes key rotation easier.