Find the .env, wp-config.php and config files holding secrets on your Linux server. Flag risky permissions and web-root backups, then encrypt them with age.