You can now store secrets in BYOK encrypted etcd using Key Management System (KMS).

Source