How to handle GitHub leaks and .env files