It's particularly useful in clustering environments like CoreOS and Kubernetes where it's a little harder to pass configs securely. Instead, just bind a local volume to your docker container with your private keys, and load your configs securely from etcd/consul.