Overview
Use a dedicated project folder so that the .env file is associated with the council run. After entering the key, explicitly verify the configuration before launching a paid request.
Do not display or share the key. A key that has been exposed should be deleted immediately because another person could use it and increase the account's bill.