Your application is running in a GKE cluster and requires access to a database password stored as a secret. You want to implement a solution that minimizes management overhead while ensuring the secret remains secure during transit and at rest. Which approach should you take?