.env.local (95% TRUSTED)