I'm switching our email accounts over to use OAuth 2.0. I've successfully configured the connection but our security team has questions on what our options are for secret storage and rotation. Looking over the documentation I don't see much in the way of options within Pega as those fields don't seem to work with global resource settings.

1. Is there a way to integrate these rules with a key storage solution? 
2. If not, are there any future plan to allow for global resource settings in this field?
3. Are there alternatives options available? 

Thanks!