.env file and API keys committed to GitHub

A .env file exported with the code puts every key in it where anyone with access to the repository...