If the PLUTO queue manager is running and the initiation queue is defined, you should see a message stating that the trigger monitor is started and waiting for a trigger message.
A special program called a trigger monitor receives the trigger message from the queue manager, reads the process definition, and then runs the command line task specified there.
If you use an encrypted communication channel, this isn't a real problem - as long as the channel encryption is solid, no outside party can monitor a message.