Currently passing potentially sensitive information to scripts/commands (including user parameters, external checks and alertscripts - probably also global scripts) is possible by passing them as positional parameters. Unfortunately, that exposes this information in the processlist.

It would be great if environment variables could be set for all all the places where Zabbix runs a command. This would allow to pass values to commands without exposing them in the processlist.