Do Not Leave Valuables in Env

Many development projects have extra special strings that shall not be shared with others: keys, passwords, tokens. Stuff you wouldn&rsquo;t commit into your Git repo, right? Right!? Unfortunately putting them into a .env file and adding that to .gitignore doesn&rsquo;t cut it anymore, since coding assistants may not respect these boundaries the way you might expect from a deterministic system.…