pub const MAX_SECRET_STDIN_BYTES: u64 = _; // 65_536u64
Hard cap for secret payloads on stdin (agent hardening / DoS guard).
Passwords and key passphrases must not be multi-megabyte streams.