Great response, thanks. Re: #3, are there any plugins to handle encrypted environment variables? I know Codeship have this option: https://documentation.codeship.com/pro/builds-and-configuration/environment-variables/#encrypted-environment-variables

Easy enough to understand. Thanks for this.