Per k3s-io/k3s#6581 the --secrets-encryption flag is no longer experimental, and the docs for managing secrets encryption doesn't mention it as experimental. But the reference for the Server Configuration still lists it under Experimental Options https://docs.k3s.io/reference/server-config#experimental-options