I've actually seen production code that BASE64 the password of a service account a script needed. Spotted it because the password ended in "==" and, sure enough, the script only decoded the BASE64, no cypher needed. Advised the client and chown + chmod the file. Client wanted the BASE64 encode still...