I hope it would suggest something like `//process.env.API_KEY` to get users in the habit of not storing secrets on repos.