The mnemonic can be passed with -mnemonic, which lands in shell history and is visible to anyone who can run ps while the process is alive. The env var is safer and already preferred, but add a -mnemonic-file option (and/or read from stdin) so the secret never appears in process args at all.
The mnemonic can be passed with -mnemonic, which lands in shell history and is visible to anyone who can run ps while the process is alive. The env var is safer and already preferred, but add a -mnemonic-file option (and/or read from stdin) so the secret never appears in process args at all.