I know that you shouldn’t save API secrets in the frontend, even in a .env file. When building, it gets stored and malicious scripts can access it. I read this Stack Overflow article, and I don’t want to use a secret manager. I am running a backend Express application. How would I keep my secrets on there instead?