Since the discussion for a built-in "vault" feature seems to have died
down, I started looking into alternatives for managing sensitive
information (like passwords and private keys) for use with my Ansible
playbooks. I found a couple of projects to store encrypted files in a
Git repository directly (encrypt on commit, decrypt on checkout), but
I wasn't happy with the implementation of those projects.
I thought the idea was sound, so I ended up writing transcrypt [1] to
be a bit more usable and safe compared to the alternatives. I thought
other people on this list might find it useful.