Mattt:

op lets you manage 1Password from the command-line. (…) Its killer features is the op run subcommand, which can dynamically inject secrets from your 1Password vault into your application’s environment. Instead of storing sensitive values directly in your .env file, you reference them using special op:// URLs.

Smart. Replacing secrets by references also means that backups are easier. I also wonder if we could define a URL scheme for keychain items URL instead of op to fetch secrets. 💻