Some kind of secrete/ingest functionality

[nonspecialist]

It would be nice to be able to have credulous wrap keys with someone else's public key, and emit in a form suitable for transmission across untrusted networks. There would then need to be a symmetric function to import the wrapped credentials using the appropriate SSH private key.