> environment variables for secrets This is not always ideal and not a best-practice. Consider that environment variables in many common environments are publi

> environment variables for secrets This is not always ideal and not a best-practice. Consider that environment variables in many common environments are publically readable by any process via /proc. If you have the option of putting the secret in a properly permissioned file on a tmpfs and run the process as a dedicated user/group, that's often more secure and no less convenient. Then you have an environment variable to provide the path to said file.