How Bruno keeps Vault secrets safe
- Secret values are never written to disk — only provider config and secret identifiers are saved.
- Secrets are fetched on demand into a per-environment, in-memory cache for the active session.
- The cache clears when you close the app or collection. Reopen Bruno and it will fetch secrets on demand.