Encrypt Environment Variables Injected into Lambdas

[freeformflow]

I'm about to finish adding the injection of key-value pairs into the Lamba's context using that service's environmental variable feature.

According to the docs, AWS provides default encryption to these variables, but that's not going to be good enough for secrets. Consider how to protect secrets. We should probably encrypt client-side, upload to AWS, and then wrap the Lambda environmental variables in a helper that decrypts them and makes them available via the require("panda-sky") module.

[automatthew]

How do we deliver the secret key to the decryption helper? I'm not familiar enough with the ecosystem to have any good guesses.