{
  "permissions": {
    "deny": [
      "Read(**/.env*)",
      "Read(**/*secret*)",
      "Read(**/*credential*)",
      "Edit(**/.env*)"
    ]
  }
}