zsh: ignore files, improve secrets mgmt

zsh/.zshrc

@@ -83,16 +83,12 @@ fi
 whence -p direnv &>/dev/null && eval "$(direnv hook zsh)"
 
 # secrets
-if [ -r $HOME/.env_secrets ]; then
-  export $(xargs < "$HOME/.env_secrets")
+if [ -r "$HOME/.env_secrets" ]; then
+  set -a
+  source "$HOME/.env_secrets"
+  set +a
 fi
 
-# for env in $HOME/.config/*/.env; do
-#    if [ -r "$env" ]; then
-#      export $(xargs < "$env")
-#    fi
-# done
-
 # command line completion
 autoload -U +X bashcompinit && bashcompinit
 autoload -Uz compinit && compinit