Keeper

Using Keeper, you could inject the GOAES_PASSPHRASE using the ksm CLI.

#!/bin/bash

export GOAES_PASSPHRASE=`ksm secret notation "keeper://dlFu8643x9JqJ5IKErBpvA/field/password"`

goaes e ./input.txt