Ahem. So this our embarrasing story about leaving a door unlocked. We run a Laravel app and recently, we discovered our AWS bill suddenly booming. Turned out we had our .env chmod'd to allow any passing sailor to take a gander of our stuff.. needlessly to say, we are on the hook for $800.. so yea, sucks to be this guy..