What is a common mistake with secrets in containers in Container Security?

Using Dockerfile ENV or COPY to bake production credentials into image layers permanently exposes them.