the secret string `abc123` leaks up in three places: — If I run this,. Tension: I can replace the hardcoded password with something like `$(pass show cloudflare-api-key)`, in which case the password only leak s in `ps` output. Outcome: This is still bad, as an unprivileged daemon on my machine could steal my credentials.

8b98ed31-ece2-4c98-9d1e-9f41973c67ae