This a session search tool, and I think calling it a memory tool is confusing.

> Secrets: The ctx README mentions saving the text as is and warns about the need to review the output data before publishing. deja explicitly removes known secret templates at the indexing stage (replacing them with tags like [redacted:aws-key]).

How is this not security theater? You've presumably already sent the api key to an LLM if it's in your session file. You need to rotate it.