Comment by gregwebs

The solution is to not have an untrusted workload handle secrets.