Several pipelines need centrally managed shared values, including secrets retrieved from a supported Key Vault integration. Which Azure Pipelines feature should be evaluated?

1. A public release-note table containing all secrets
2. An unrestricted personal text file outside pipeline control
3. Variable groups with appropriately authorized secret integration
4. A Git tag containing the credential