diff --git a/journal/2023-03-19.md b/journal/2023-03-19.md
index 7abca9966..aebf280e8 100644
--- a/journal/2023-03-19.md
+++ b/journal/2023-03-19.md
@@ -1,6 +1,8 @@
 - #push [[coop cloud]]
   - [[abra]] CLI
   - [[coop cloud recipes]]
+  - [[passwords]]
+    - `abra app run --user root foo.bar.com app bash` then cat `/run/secrets/your_sneaky_secret`
 - #push [[social coop]]
   - [[keycloak vs authentik]] https://www.reddit.com/r/selfhosted/comments/ub7dvb/authentik_or_keycloak/
     - the top answer makes a good case for keycloak, 3wc recommended keycloak even though they don't like their IBM link -- it seems keycloak is the reliable/stable/trusted way so I think I'll go with that