Has GAE sorted out secrets management? Last I checked, they required you to commit secrets to the repo you push, which necessitates your secrets being on whatever computer (or whoever's computer) does production deploys. Contrast this with DO/Heroku/etc. which lets you set environment variables.
Some folks suggest using a DB to store secrets on GAE, but this is (IMO) just obfuscation.
Some folks suggest using a DB to store secrets on GAE, but this is (IMO) just obfuscation.