Stop sharing .env files on Slack. GitHub access = secret access. That's it. If you have access to the repo, you have access to the secrets. No invites, no training, no friction.