Do we need to "hide" this secret key in the ENV file? Is this a secret? Or are we .gitignore ing this file anyway?