Hiding shiro.ini and other sensitive files from end users

[Tony Primerano]

Is there a recommended way to hide secrets contained in shirio.ini and
other files?

I made my shell interpreter run as a different user to prevent access to
configuration files but from a python interpreter you can run shell
commands as the Zeppelin process user.

Is there a way to prevent this?

Thanks
Tony