Unsafe - Password read in flags or config

[dougg0k]

Hey, nice tool.

I did a quick look at the docs, you seem to have --password flags and config that are plaintext expecting passwords to be in them. That is unsafe, afaik.

Passwords should always be passed/read through stdin, or be encrypted (or through other safe store means) if in the config files.

Any plans to address these?

Or perhaps have I missed something in the docs that could be addressing this already?

[dougg0k]

??