I had credentials hardcoded in my Go project’s config, with defaults baked right into the binary. The LDAP admin password was sitting in config.go for anyone to read. Not great, even for a personal project. Here’s how I replaced that with pass, the standard Unix password manager.