Docker Sandboxes provide secret injection using a network proxy outside the VM so the agent never has direct access to the secret: https://docs.docker.com/ai/sandboxes/security/

Note: I work at Docker