How to deploy secrets with flux without having them in source control

[preston-willis]

I want to deploy secrets with flux without having the secrets defined in my source control. Ideally they would be a bitbucket secret, but maybe theres a way to tell flux to deploy some sort of other resource that holds the secrets in a secure location?

Thanks