pub fn cache_before_seal(r: &SecretRef) -> Result<(), SecretError>Expand description
Resolve r now and remember it, so a later resolve_blocking succeeds even
once the path is unreachable. Call before sealing. Errors are the caller’s
to report — a secret that cannot be resolved pre-seal is not cached, and the
later lookup fails exactly as it would have.