100% YesCurrently using systemd-creds to displace any secrets in envSpending time getting to grips with Keylime