Paul Yates After speaking with Craig this is already the case but the labels are missing on some of the resources created in sync. Will make an update to the deprovisioning fix PR to include the labels. We can then just check that there are no secrets with that label.