Secrets backends
Would it be worthwhile supporting different secrets backends across the components? An obvious example here would be hashicorp vault.
By 'different secrets backends', do you mean 'multiple secrets backends, with the possibility to have separate backends for different components', or 'support hashicorp vault (and/or others) as an alternative to docker secrets'?
The latter, which I guess encompasses the former.
Yes, I don't see why not. Do you have a specific situation in mind where this would be useful?
Well, any scenario where docker swarm isn’t the deploy method really. Or where it is, and you want something more robust for credential rotation for example.