I don't get why you would have PRODUCTION secrets in those local .env files. It should only be dev tokens.