Why are credential literals risky inside an executable maintenance script?
A literal automatically changes the script mode to world-writable.
Anyone who can review, copy, or reuse the script also receives the secret values.
A shell refuses to execute any script containing a password variable.
Every variable assignment is automatically sent to the system log.