> How do you solve the issues of private key sharings that are stored in cwd .env?

Stop putting sensitive stuff there.