The bootstrap and add-user docs passed --password 'plaintext' on the docker compose run command line, leaking the plaintext into shell history (~/.bash_history, ~/.zsh_history) and the process list (ps aux). Switched all three call sites to the interactive form (no --password flag), which makes Authelia prompt for the password and a confirmation without echoing. Affected: - README.md "Create your first user" step - README.md "Add a user" section - authelia/users_database.yml.example header comment https://claude.ai/code/session_013XZ1vmgk78k2PEQ5DmJhF3