“The command line really wasn’t designed for secrets.”
Pass a private key as an argument and anyone on the box can read it with ps. The fix is pipes, files with tight permissions, or carefully scoped environment variables. The author works at a certificate company and still made this mistake in his own homelab. If he can get it wrong, your deploy scripts almost certainly do.