About "Secret Manager"
The CCS Secret Manager service provides a secure way to share secrets such as account passwords or BitLocker secret keys. The secrets are shared via a secure link rather than by value as plain text. Each secret can be retrieved only once - it is deleted from the database as soon as it is read or after 7 days (whichever comes first). Therefore, if you can retrieve the secret that was sent to you, then nobody else intercepted it.
The secrets are encrypted in transit and at rest and optionally can be encrypted in use as well.