[lux]

I don't see much mention of secure environment variables. How are those treated?

[ibejoeb]

It looks like this is primarily intended to distribute variables to client applications. Secrets are not candidates for this kind of distribution.