check out varlock.dev (free and open source) Adds validation and has plugins to pull from anywhere (1pass, aws, keepass, etc)