Hi, A simple feature with a lot of potential value would be to support passing nncp configuration on FD0 when the path is "-". With that in place the configuration file can be outside nncp's view of the file-system. Also, the configuration could be piped through jq scripts that attenuate the configuration by removing secret keys that would be unnecessary for a given operation. Cheers, Emery