I believe they meant mounting via Kubectrl as a file, from the secret manager.

So runtime file injection.