Secrets that never enter the container

[olad32]

Nice project, is it planned to have a feature that dynamically replace secret in env var with placeholder keys, and placeholder are then replaced with the real secret value by intercepting and modifying outbound request ?
For example this sandbox project implement this https://github.com/superradcompany/microsandbox, advertised as :

Secrets That Can't Leak: Unexploitable secret keys that never enter the VM.