This would be perfect if it also was able to expose secrets as files scoped to the process ala /run/secrets/secret_name.