> Any good solutions for passing secrets around that don't involve environment variables or regular plain text files? Plain text files are fine, it's the permi

> Any good solutions for passing secrets around that don't involve environment variables or regular plain text files? Plain text files are fine, it's the permissions on that file that is a problem. The best way is to be in control of the source to the program you want to run then you can make a change to always protect against leaking secrets by starting the program as a user that can read the secrets field. After startup the program reads the whole file and immediately drops privileges by switching to a user that cannot read the secrets file. Works for more than just secrets too.