The parent poster is wrongly quoting me to say the original post doesn't mean “env var”. Yes, it does mean env var.

No, they are not stored permanently on disk according to 12f. They are only injected for the lifetime of the application and destroyed when stopped.

It's not okay to store your secret on your own machine disk's .bashrc forever.

It seems we're in agreement anyway.