It's all cool as long as you keep all of this up to date, and that requires a lot of scrutiny and discipline. Once I had to go through a security audit at a job I had. Part of it was to show managing secret keys and who had access to them. And then I realized that the list of people who had access to one key was different than the list of the code owners of the service I was looking at, which was yet different than t…
I see only 1.
Admin, access ownership.