When working with agents or any untrusted workload, credential brokering (inject placeholder secrets, replace in MITM proxy) is the way.
Varlock is the easiest way to try this out - and can load secrets from any of our plugins (
@1Password,
@infisical, etc)