Secrets Storage, Handling and Redaction

[JoTurk]

Ensure secrets (TURN creds, database creds, tokens) are never logged and can be sourced securely.

Options & Discussion

1. File paths for secrets

• Pros: K8s/Container friendly
• Cons: More IO wiring

2. Env only

• Pros: Simple
• Cons: Risk of exposure

Sub-issues / Tasks

• encourage users to store secrets in hashed or encrypted forms when appropriate, e.g: TURN tokens.
• Allow reading secrets from file paths or env

[xinze-zheng]

I will work on this tomorrow on top of the initial config module.