RHACM: How to distribute secrets from the HubCluster to a fleet of SpokeClusters into different Namespaces?

Issue

Let's assume you have a Secret which is stored on the Managing-Cluster and
you need to distribute this secret to the fleet of Managed-Clusters, where the namespaces can change - so a flexible solution needs to be found. Once the secret gets updated on the Managing-Cluster this change needs to be reflected on the Managed-Clusters.
How can this be achieved in the most efficient way?