I'm encrypting and decrypting some messages with AES Encryption, which requires a secret key. The encryption/decryption is both done on the client side (web browser), not the server. When inspecting the source maps from the browser, storing the key in .env files can expose the key. Is it possible to completely restrict access to such keys in a React app?