The solution is to not have an untrusted workload handle secrets.