#plaintext agent config should be treated as potentially compromised and rotated now