Module secrets 

Pluggable secrets backend interface — ADR-014 §5. Pluggable secrets backend interface — ADR-014 §5.

The host owns the secrets interface; customers reference secrets by name (vault://prod/tls/kafka, file://kafka-prod). The secrets backend resolves references to opaque handles consumed by transport.tls.

Structs

CredentialHandle

Opaque credential handle — consumed by auth providers.

NullSecretsBackend

No-op secrets backend used when no real backend is configured.

RotationEvent

Rotation notification emitted when a secret is rotated.

SecretString

Zeroizing secret string — debug output is redacted.

TlsHandle

Opaque TLS material handle — consumed by transport.tls::connect_tls.

Traits

SecretsBackend

Pluggable secrets backend trait — ADR-014 §5.