I currently store a lot of different API keys and secrets across various .env files (which are not checked in to git) on my local machine. If I need to reuse a key usually look into other project files and copy it from there. Is this considered good practice or should I be using something like a password manager for them?