By default can still read anything, including all secrets in .env files, kubernetes credentials etc