Not saying I make of habit of this, but sometimes you have to pass sensitive things as arguments (passwords, api tokens, customer data, etc), it happens.
I think client side encryption by Bashhub would alleviate this security concern.
That doesn't have to mean typing it at your command line. My approach is typically to set shell variables with read (if I need to type it) or xclip (if I need to paste).
Of course, client side encryption would be great in any case.
I think client side encryption by Bashhub would alleviate this security concern.