Hacker News Reader

You have envchain to store secrets as ENV variables in your keyring and execute commands:

Not really something you would use for production web apps, I think envconsul covers that usecase:

ENV vars are global variables; they will be visible to all the child processes as well unless care is taken. Is that really worth it?

If your app needs a secret, and it forks, I would assume the child processes also need that secret.