H-3 from Project Glasswing security audit of hawtio-operator. When a custom Route TLS secret is configured and the operator runs at -v=1 or higher, the entire Route object including spec.tls.key (PEM private key) is JSON-serialised into stdout. Operator logs are typically forwarded to centralised logging and readable by anyone with pods/log in openshift-operators. Source: hawtio-operator-security-audit.json#H-3.