warden secret

Store credentials the agent never sees.

warden secret add stripe-key --host api.stripe.com
warden secret list

• add <name> --host <host> [--type <t>] [--path <p>] — the value is entered at a masked prompt (or stdin line 2 with --password-stdin). Prints the secret id a warrant scopes by.
• list — id, name, and host (never values).
• rm <id|name> — delete a credential. Issued warrants keep working until revoked.