Comment by amelius

> ... reads a file in secrets.yml format and injects secrets as environment variables into any process

Meaning that every child process will subsequently have access to the secrets?