podman run --rm --secret source=secret1,type=mount,uid=1001,gid=1001,mode=440 docker.io/library/alpine cat /run/secrets/secret1