If you check that the code you get from your secret manager is signed with a non-revoked key and you have reasonable degree of assurance in your intrusion detection, evaluating signed code is perfectly fine. World runs on evaluating signed code.
It’s all about threat model, right? If your threat model is “my secret storage got compromised”, odds are, arbitrary code execution on your production servers has already happened by then.
But yeah, awesome thread, we were getting secrets one by one on bootstrap, and are currently moving to evaluating one signed secret instead.
