Sometimes, you do not want your secret or environment variable to be exposed at run time.

We want to let you set the scope of secret and environment variables to build time, runtime, or both so you can manage what data is exposed.