Retiring the skull-shaped box
For years, the standard way to store a forbidden name was to lock it in a skull-shaped box and hope. The box was cursed, which counted as access control. It also meant that rotating a secret required a volunteer.
Modern secrets management starts from a simpler idea: every incantation, magical key and API token lives in one place, with an audit trail of who read it and when. Short-lived tokens expire on their own. Anything powerful enough to need a ceremony gets a two-wizard read instead.
Rotation is the habit that matters most. A ward phrase that has not changed in a decade is not a secret; it is folklore. Rotate on a schedule, rotate after every departure, and rotate at once if anyone so much as whispers it near a raven.