I think it would be a good possibility, if you can change the visibility of the global rules, because you can block for example commits, diffs, which contains a passwort (already possible), but you can't put in specific data, because every user will be able to see the data, if you don't restrict whole herald to only a few users.
A alternative way: Allow to let herald search for specific secrets from passphrase.