I've seen secrets stored in special files, or personally I prefer something like https://www.vaultproject.io/ https://www.vaultproject.io/, which may still use

I've seen secrets stored in special files, or personally I prefer something like https://www.vaultproject.io/ https://www.vaultproject.io/, which may still use environment variables, but they can potentially be passed in in a more secure, controlled way.