---
upgrade:
  - |
    The default behavior of the ``tools/encrypt_secret.py``
    helper script is now to strip incoming input of leading
    and trailing whitespace. A new ``--no-strip`` option
    has been added to support people with secrets that contain
    valid leading or trailing whitespace.