Block a user
fix(secrets): wrap an image server's own command, not just entrypoint
fix(secrets): injector-delivered servers must attach, not exec
fix(secrets): injector-delivered servers must attach, not exec
fix(secrets): injector wrapper must replace the entrypoint
fix(secrets): injector wrapper must replace the entrypoint
fix(servers): persist secretDelivery and entrypoint
fix(servers): persist secretDelivery and entrypoint