When deploying (e.g., on cloud platforms), use the platform’s built-in secret manager or environment variable settings instead of uploading keys in the code. Rotate Keys if Exposed If you accidentally ...