Probably want to use a secret management tool and just not initialize into environment variables...

https://github.com/fugue/credstash