keyshroud

Agent-safe secrets from self-hosted Vaultwarden/Bitwarden: injected into commands, masked in output