[threatofrain]

One might use a variation on the idea, like how 1Password does it. Everything in your .env is just a pointer so it's safe to commit.