@ChocolateOverflow Yeah files are safer, assuming permissions are set up correctly. As for processes, if you mount procfs with hidepid=2 then one process can't see another user's processes, including command line. But if you're passing sensitive data between processes, I'd recommend using a pipe or a similar IPC.
> -Warray-bounds finds quite a few interesting upstream bugs when certain plugins of ours are enabled. See if you can spot the bug in virtio_crypto_alg_akcipher_init_session() without them :)