Moves development secrets from plain-text dot files into a local encrypted vault protected by Touch ID. Existing tools can access credentials through helpers, environment injection, or a named pipe, with request logging and bounded grants for agents.