The threat model is that history is persistent while the environment isn't. That said, whenever possible you should handle secrets using file descriptors as opp

The threat model is that history is persistent while the environment isn't. That said, whenever possible you should handle secrets using file descriptors as opposed to environment variables.