Ask HN: How do you store production credentials?

Particularly, if you have fabric scripts that are responsible for running deploys etc, how do you distribute, store, and secure the credentials required to back these scripts and allow them to access servers and run builds?