How we share secrets at a fully-remote startup

Here’s the situation: a small, fully-remote software team works on a service (let’s say Grist), and to run it, they need a secret key...