How to handle secret variables in Terraform? Environment variable?

I use environment variables.