We could simply make the "view file" tool not able to see .env. Same for other "grep-like" tools.