@bascule ("Tony "Abolish ICE" Arcieri 🦀🌹") replied to a tweet by @bascule:
Something I think could be really helpful here is better protections for http://crates.io tokens.
There is in fact nascent support already in place for outsourcing secrets management for http://crates.io tokens to a helper/agent subprocess!
https://github.com/rust-lang/cargo/issues/8933