>>53471647The other hint I had in mind would be too on the nose, but yeah there are a lot of keys that don't get autorevoked just laying around in plaintext on those two locations.
This is my disclaimer I do not endorse any actions done with these keys I am bringing awareness of a code security issue.
Lastly while I would be okay with a sekrit /wAIfu/ one there's also the issue of how to gatekeep it since we know passwords don't work and user-tokens...how would we decide who gets them. Things like that.
