Keep Secrets Out of the Agent: Brokering, Rotation, and Infisical
Env vars and .env files put the real credential inside the agent's process. A proxy keeps the value out of the agent's requests, and on a server, rotation reaches running agents without a restart. What Infisical covers, what it doesn't, and how to test your own setup.
15 min read