We do have ways to avoid giving an LLM any secrets, but it needs to be the simple, default solution.