On most multi-user setups, command line arguments can be viewed by anyone on that system. Passing the authKey via a command line argument can be a security flaw.
Allowing the user to pass the path to a file instead will eliminate that problem. Using a tempfile that can only be read by the user, we can safely pass the authKey without the possibility of a third party reading it.
I added the authKeyFile option, that allows for exactly that.
On most multi-user setups, command line arguments can be viewed by anyone on that system. Passing the authKey via a command line argument can be a security flaw.
Allowing the user to pass the path to a file instead will eliminate that problem. Using a tempfile that can only be read by the user, we can safely pass the authKey without the possibility of a third party reading it.
I added the
authKeyFile
option, that allows for exactly that.