- Deprecate
allowin config. UseallowedClientKeysinstead. - The node process
process.envnow always gets injected with the environment variables. This meansprocess.envwill have your secret environment variables, but you still have to explicitly allow client keys.