How do you manage secrets? I previously relied on environmental variables, but I'm learning there are limitations with that practice