you might have an untrusted sandboxed workload that is not supposed to communicate externally handling secrets, and a different sandboxed workload able to communicate with the external world, not handling secrets.
The solution is to not have an untrusted workload handle secrets.
The solution is to not have an untrusted workload handle secrets.