Next.js env var tooling could definitely use some improvement, and pulling from a secure external vault makes sense, but I think there's more to it.

Have you seen http://varlock.dev/integrations/nextjs