How a two-tier encrypted vault keeps credentials out of the model context — and why the standard .env approach is a security liability for autonomous agents. For a normal web application, a .env file is a perfectly reasonable way to manage secrets. ...