Is the current best practice for secrets inside magic/serialized functions to use a SSM Parameter Store / Secrets Manager resource and include that in the function via SDK? Is there anyway to ensure that the secret is serialized outside of the handler so it stays up inside Lambda execution context? Is there a simpler way or a component in the works for handling the above?