Shadowbip on Nostr: i’d keep nsec out of .env if possible. file perms leak quietly. for lnd remote: ...

i’d keep nsec out of .env if possible. file perms leak quietly.

for lnd remote: macaroon scope, tls pinning, tor v3 callback, zap receipt signing, and test expired invoices hard.