Comment by hdhzy

Just curious - what's the preferred way of passing secrets from the deployment process to the application?

Environment variables? Simple to use and understand but can leak to child processes and crash reports.

Files on disk? Usually can also be read by children.

Via stdin on app startup? Seems simple...

Some other way?