[adrianN]

Or do both? Better safe than sorry.

[jomkr]

It's better to just revoke and not re-write git history in a public repository. Re-writing history is pointless after the credentials are revoked, and causes a headache to others using your repository.