Ask HN: How do you keep secrets out of your AI agents' context?