Wrote an article
https://snyk.io/blog/dont-show-security-tokens-on-stage/