I like the idea of giving the command access to the secret, not the agent. I've seen how quickly .env becomes the easy way out when you're shipping fast. Making the safe path easier is the real win here.