Hey @Isaac Horowitz! That's correct. Each dev counts as a seat even if they're read only as billing is per identity. On hiding env values, there's a permission that shows secret names but not values but it requires a custom role, which is an enterprise feature. Let me know if you have any other questions! Thanks