Securing API keys and secrets is very important. Storing secrets in a .env file is good but that alone is not safe.