Protecting process.env in nodejs when contains secrets

Question

In order to avoid having secrets hard-coded into the code, I\'ve used the standard approach of using dotenv to load an .env file when run locally, or have secrets injected into