STRIPE_KEY I understand because it's an external service that you can't really simulate locally. But DATABASE_URL - why not just default this to localhost, and

STRIPE_KEY I understand because it's an external service that you can't really simulate locally. But DATABASE_URL - why not just default this to localhost, and default the secret to a dummy string? If your workflow doesn't even use secrets in the first place, you can never accidentally commit them.