pal is a client program you can use as your Docker entrypoint to communicate with pald daemon on the host.

pald is the daemon running on the host responsible for decrypting secrets.

palpgpenc is a helper utilty to help generate pgp-encrypted secrets.