how do you handle secrets management in a distributed system?

hey evryone im tryin to nail down the best practices for managin sensitive info like api keys, database creds, and certs across multiple microservices. whats your go-to strategy for keepin these secrets secure and rotatin them effectively? any specific tools or patterns you find particularly useful