> Security. First of all, let's just consider the fact that with .env files you are storing completely unencrypted secrets locally on your machine... In genera

> Security. First of all, let's just consider the fact that with .env files you are storing completely unencrypted secrets locally on your machine... In general, right after people say this, they propose encrypting the secrets somehow but then storing the decryption key completely unencrypted locally right next to them, or something that's equivalent to doing that. Is this an exception?