Design a secrets store that encrypts credentials at rest and in transit, supports auto-rotation of API keys and DB passwords, and provides a full audit trail of every secret access.