How should secrets be handled for containerd vs CRI-O?

    // Example of securely handling secrets in containerd
    $secret = 'your-secret';
    $base64Secret = base64_encode($secret);
    
    $cmd = "containerd exec my-container -- my-command --secret $base64Secret";
    exec($cmd);

    // Example of securely handling secrets in CRI-O
    $secretFile = '/etc/myapp/secret';
    file_put_contents($secretFile, $secret);
    chmod($secretFile, 0600);

    $crioCommand = "crictl run -t --secret $secretFile myimage mycontainer";
    exec($crioCommand);