Show HN: Keeper – embedded secret store for Go (help me break it)
Keeper is an embedded secret management library for Go applications that provides cryptographic storage of secrets at rest using industry-standard encryption (XChaCha20-Poly1305) with flexible security levels ranging from automatic startup unlock to HSM and remote KMS integration. For IT organizations, this represents a shift toward decentralized secret management embedded directly in applications rather than external vaults, reducing operational overhead while enabling fine-grained per-bucket access control and audit trails. The strategic implication is that development teams can now implement hardened secret management without external dependencies, though IT must establish clear policies around when embedded stores are appropriate versus centralized KMS solutions.