When bootstrapping self hosted infrastructure, you cannot rely on the presence of the services which you have not yet set up. So while your normal devops scripts can count on an OpenBao instance, your bootstrap scripts need something smaller and self contained.

Keepassxc has been perfect for this. A clean UI allows humans to navigate if needed, and keepassxc.cli provides enough surface to let a script generate a .env file as part of a bootstrap or disaster recovery process.