Deploy secrets within partially-trusted buildkite pipelines - View it on GitHub