What is a common mistake when working with secret management?

A common mistake with secret management is moving a secret from source code into an environment variable but then printing the environment or storing it in deployment logs still exposes the credential. The safer approach is to design and test the behavior explicitly rather than assuming the platform or dependency will handle it automatically.