Hacker News Reader

I don't see much mention of secure environment variables. How are those treated?

It looks like this is primarily intended to distribute variables to client applications. Secrets are not candidates for this kind of distribution.