Better practice for storing keys

It's generally better to store keys in an environment variable instead of hardcoding them into a bootstrap file. Luckily enough the linked page for protecting sensitive configuration uses Stripe as an example.