{"comment":{"url":"https://api.github.com/repos/cockroachdb/cockroach/comments/11907722","html_url":"https://github.com/cockroachdb/cockroach/commit/30c958ea54bad6fc767060681a007d076d8a6b69#commitcomment-11907722","id":11907722,"user":{"login":"MBerhault","id":5901480,"avatar_url":"https://avatars.githubusercontent.com/u/5901480?v=3","gravatar_id":"","url":"https://api.github.com/users/MBerhault","html_url":"https://github.com/MBerhault","followers_url":"https://api.github.com/users/MBerhault/followers","following_url":"https://api.github.com/users/MBerhault/following{/other_user}","gists_url":"https://api.github.com/users/MBerhault/gists{/gist_id}","starred_url":"https://api.github.com/users/MBerhault/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MBerhault/subscriptions","organizations_url":"https://api.github.com/users/MBerhault/orgs","repos_url":"https://api.github.com/users/MBerhault/repos","events_url":"https://api.github.com/users/MBerhault/events{/privacy}","received_events_url":"https://api.github.com/users/MBerhault/received_events","type":"User","site_admin":false},"position":29,"line":64,"path":"security/password.go","commit_id":"30c958ea54bad6fc767060681a007d076d8a6b69","created_at":"2015-06-29T11:06:18Z","updated_at":"2015-06-29T11:06:18Z","body":"we could, but if you're worried about someone doing direct memory access, there are much simpler ways. After all, we're reading all this from stdin. This is also done by an admin user, which means the http transport will have read the client certificate key, and is still holding the certificate in memory."}}