@dansup I assume this has to do with the plans of offering hosting for Pixelfed, and ease of configuring when no server access is given

but stuff like this should be handled in a hosting panel outside of the main app then.

adding so much logic into the application to keep those values safe, when easier options are already there is a bit...counter-productive. and error-prone as well, and you don't want these secrets to get into the wrong hands!