it's both true putting any form of secrets into a env var is deeply insecure using env is the most simple uniformly available way to have configs through I w

it's both true putting any form of secrets into a env var is deeply insecure using env is the most simple uniformly available way to have configs through I would take it a step further, anything which must not be leaked probably should not be in any config, weather env or file or similar, it should be injected through other means if viable