Ah, that's fair. I setup a dedicated vault for my Claude Code and only gave it access to the secrets I'd probably otherwise have in a `.env`.