Should provide secrets from different providers (Vault, GCP, AWS) Generic interface All CRUD operations supported