Protecting sensitive configuration using .env.*.php files