Pergunta de entrevista da empresa Stuart

In which files would you store API tokens, passwords, or similars?