By this standard, you should never trust a directory. Since it will push your env secrets.

You shouldn’t have secrets in your environment.