100% Yes Currently using systemd-creds to displace any secrets in env Spending time getting to grips with Keylime