Constant SENSITIVE_ENV_PREFIXES 

pub const SENSITIVE_ENV_PREFIXES: &[&str];

Env var prefixes the tool refuses to let the model set. Mirrors the TS SENSITIVE_ENV_PREFIXES list.