Secrets with permission role based access

Currently secrets only work for admins and the server side of Ayon.
In order to make secrets more usable, it would be nice to have secrets with permission role settings. So a secret can be read by a User, Manager etc…
I know if Users can read a secret one can be picky and say it is not a secret anymore. But the layer of obscurification and the usage in settings with secrets_enum can become best practice.