Final Note

While we do our best to make it as hard as possible to extract any sensitive information from oidc-agent, it is impossible to fully protect any application from an attacker that has the same or even higher rights as the user that runs the application (i.e. oidc-agent).