[griffindy]

on a unix system you could put them inside `/etc/profile.d/user.sh` as environment variables so that whenever that user is running something those variables exist. then if you're using chef (not familiar with puppet, etc.) you could keep those passwords/keys in an encrypted data bag and set them during provisioning.

[wilmoore]

Good idea...and, yes, you can do the same with puppet.

[meaty]

Nice solution.