On Tue, 16 May 2017, Kamil Dudka via curl-users wrote:

> I do not believe it would help either. As long as the curl tool gets the
> "secret" headers by a command-line argument, which is the only choice at the
> moment, it is observable from outside while curl is running.

It could probably be done by a script or something that pipes the secret
header as a -H command line option on stdout that gets read with curl's
--config / -K, similar to this:

  $ ./generate_secret.sh | curl -K- http://example.com/

-- 
  / daniel.haxx.se
-----------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-users
Etiquette:   https://curl.haxx.se/mail/etiquette.html