- Changed 'service' argument to 'yaml_tag' to be clear on usage and to further
separate from keyring usage. - Allowed prevention of password saving to env via
option('shelter.save.env'). - Added helper functions for exporting keyring to production override formats.