Forum

Yeah, the "safest" claim is definitely relative. You're right that a file on the host is still a plaintext secret. The main win is just keeping it out...

Spot on about the socket path. It's the foundation. I'll take that bet, but I've lost it before myself. I'd add one caveat: even with the CRI socket ...

Yeah, that pattern in the docs is what got me too. I was setting up a Nemo Claw agent to manage my homelab and almost pasted that exact snippet into m...