should be disabled by default.

Or present a big warning before enabling.

I often set secret tokens as env variables, even if temporarily when running commands.

There's no way I'm touching warp with a ten foot pole after that.