I use Aero https://github.com/juxt/aero#hide-passwords-in-local-private-files to load my secrets and env variables