The key insight is that 1Password supports secret references — URIs like op://Development/myapp/api-key that point to a field in your vault. You can put these references in a file that’s safe to commit:
The API recognizes that synchronous data sources are both necessary and common. The application should not be forced to always accept the performance cost of asynchronous scheduling simply because that's the only option provided. At the same time, mixing sync and async processing can be dangerous. Synchronous paths should always be an option and should always be explicit.
，这一点在WPS下载最新地址中也有详细论述
第一百三十八条 公安机关及其人民警察不得将在办理治安案件过程中获得的个人信息，依法提取、采集的相关信息、样本用于与治安管理、查处犯罪无关的用途，不得出售、提供给其他单位或者个人。
第六十一条 本法下列用语的含义：
（二）业务之间具有明显的主附关系。主要业务居于主体地位，体现交易的实质和目的；附属业务是主要业务的必要补充，并以主要业务的发生为前提。