Password tools fnox varlock AI-safe .env files: Schemas for agents, Secrets for humans secretspec declarative interface for every secret provider bitwarden keepass sops gopass vault