I put mine in various aes encrypted file (like `~/.secrets.aes`) and then source it explicitly when needed with:
. <(aescrypt -d -o - ~/.secrets.aes)
I have a handful of aliases/functions to make it more smooth, but that's the core.