Interesting approach. How do you prevent an agent from sending the placeholder to an unapproved domain and having it replaced there? Is secret injection restricted by destination host?