What's the best practice for managing eas secrets that have different values based on the build profile?

I have a handful of secrets that have different values based on the eas build profile (e.g. production vs staging). What’s the best way to manage these? Do I need to prepend the name of the profile to each one of the secrets like this?

PRODUCTION_GOOGLE_SERVICES_ANDROID
STAGING_GOOGLE_SERVICES_ANDROID

Or is there another way that I’m not seeing?

Thanks!

Managed workflow
eas-cli version: 0.38.3