Hi Yan, thanks for the fantastic article. Regarding your comments that serverless ssm support would store environment variables in plain text, couldn’t you simply setup the lambda to (re-)encrypt the environment variables with KMS on deploy?