Like someone said, there is fnox by the same author for secrets.

Whatever is truly local (not necessarily secrets ) should go in mise.local.toml and not be version controlled.

You also have MISE_ENV if you want to manage completely different environments.