permission to read env files leaks all secrets to llms

[Bnowako]

"read": {
            ".env": "allow",
            ".env.*": "allow",
            ".env-*": "allow"
        }