I need a great local key vault and secret manager. Which securely resolves required secrets at runtime only. Further only whitelisted processes should be able to decrypt a particular secret.

This is becoming a challenge with rising coding agents and integrations with 3p systems.

Any recommendation?