We have some credentials to store like Phabricator API token or GitHub secret in a credentials.json file.
We want to be able to regenerate this file from passwords stored somewhere (DevCentral passphrase?).
This could be a job for the zr getconfig script (see config/forumforum.yml.tmpl in rOPS).