Best practice is to mark these options with something like # define these in your .bitrise.secrets.yml, in the app:envs section.