Credential service implementation, supporting systemd's LoadCredential Unix socket feature
Work in progress
- Load credentials from HashiCorp Vault
- Has very primitive reading support - no writing support yet.
- Load credentials from file
- age & PGP support planned.
- Credentials reloading
- Note that this is a best-effort hack, see systemd/systemd#21099
This program is using SUID & SGID to reload credentials for non-root user services.
No audit has been done, thus use this feature at your own peril.