How to Handle Secrets on the Command Line