Simple CLI for an age-backed secrets repo