When you need a system envioment orther serivces don't need to see eg. server password or somthing like this, you can use protecting secret in docker swarm cluster, its will store a file inside your container for the container services you pick there shut get access for this protecting secret