Where do you keep your initial configuration? Is your secret manager/vault the only thing that's defined and handled locally?