​

Security Best Practices

• Rotate keys periodically.
• Use the most restrictive model list possible for each key.
• Never commit keys to git.
• Prefer separate keys per environment (CI, dev, prod).
• Revoke compromised keys immediately.