Encrypted database passwords in .env for Laravel 8-13, decrypted at connection time so no plaintext ever reaches the config cache.