This ^^ Just avoid putting secrets in the global environment if it is a concern, and instead just pass necessary secrets locally in the environment when launch

This ^^ Just avoid putting secrets in the global environment if it is a concern, and instead just pass necessary secrets locally in the environment when launching a specific app.