Context

The share password and Cloudflare tokens must persist for leashd, which runs in the background as the user.

Decision

Store them in secrets/sharing.json in Short Leash's folder with permissions 0600, never in config.toml, and never return them through the API.

Consequences

Works the same for the daemon on macOS and Windows without keychain prompts. Anyone who can read your files as you can read them, as with most developer credentials.