See for example https://travis-ci.org/github/sympy/sympy. It makes it hard to see the actual environment variables that are used to differentiate jobs.
We might
- Suggest people to put the secure key only on the matrix build that needs it.
- Rename the environment variable to something like
_DOCTR_DEPLOY_..., assuming that makes it list after the other ones.