In practice, this is only used by it.
My secret files in public! All hail secret management tools!
In my case, this is managed by sops and sops-nix for integrating it with my NixOS setup.