You shouldn't use ENV variables for secret data (2017) (diogomonica.com)

So I would have to tolerate the Docker overheard just to use ENV vars? Versus the alternative of just responsible ENV var use (log hygiene, etc)?

Unfortunately docker swarm is basically dead today