For functions or secrets? For secrets, ephemeral cache files in a ram disk that set variables with proper posix permissions that only allow root and the applic

For functions or secrets? For secrets, ephemeral cache files in a ram disk that set variables with proper posix permissions that only allow root and the application to read. The file should be removed when no longer required. Why? Avoid leaving secrets on a hard drive. Cache them in case our secret store is not reachable. Avoid logging secrets in auditd by keeping them out of arguments.