FRESH
autojack
The Secret Wasn’t in the Config File — It Was in `ps aux`
A clean config file didn't mean a clean runtime — an MCP sidecar was leaking a secret via its own command-line arguments, visible to any local user via `ps aux`.