Stop Putting Secrets in .env Files

blog
https://jonmagic.com/posts/stop-putting-secrets-in-dotenv-files
Should definitely be using 1P!