MF

Hi there. I have tried adding `become: true`. If I recall correctly, the homebrew_cask action stalls out & never complete. I'm having a hard time reproducing & verifying this old...

For reference, in `dd-trace-js`: * https://github.com/DataDog/dd-trace-js/blob/94edef76f120389c5f31e0ff4d907342780aaab9/packages/dd-trace/src/profiling/config.js#L62 accepts only `DD_AGENT_HOST` * https://github.com/DataDog/dd-trace-js/blob/94edef76f120389c5f31e0ff4d907342780aaab9/packages/dd-trace/src/config.js#L75-L76 accepts either `DD_AGENT_HOST` or `DD_TRACE_AGENT_HOST`.

> Where is the attack vector? We are indeed turning down our security monitoring across a wide range of projects, owing to Bunyan, which we hope indeed is not actually...

There is some work in progress from back in April in #2010. [Node 18.13.0](https://nodejs.org/en/blog/release/v18.13.0/) just shipped `fetch` without the experimental warning. The PR for that is nodejs/node#45287.

I was digging through MDN docs on CORS, and happened to notice a specific CORS error that suggests an extra-partiuclar reason something like this might be useful: "Reason: Credential is...

We're trying to rotate all our secrets per [the recent security incident](https://circleci.com/blog/january-4-2023-security-alert/), and lacking this capability is bringing us down a lot.