[devendra116]

if a agent has the keys in the same process, it can easily extract them

[theozero]

Totally - the only completely safe way is to inject keys in a proxy and keep them out of the process. But getting them totally out of plaintext is a great first step, both to keep it from AI and malicious scripts that are looking for keys.