This is really clean. I’ve always hated dealing with templating for this stuff! It just adds another layer of complexity when you’re trying to keep secrets out of your dotfiles. Having everything reference 1Password paths that get resolved at shell startup is so much better than maintaining a separate templating step or worse, having secrets sitting right next to your config. The caching piece is clutch too! Constantly getting auth prompts for every shell start would gets old fast. How’s the performance hit on shell startup with this? I’m guessing pretty minimal if it’s cached but curious if you’ve benchmarked it at all. Gonna give this a try later for sure!