I'm looking for a security best practices guide or recommendation for AEM that includes how to manage secrets, for example credentials like API tokens, passwords or keys for third party services integrated with AEM. I'm not a security professional, though I'm curious enough to learn more about the a...