[kobeya]

It's been my impression that the standard (promoted by services like Heroku and Travis) is to pass secrets as environment variables.

[suprememoocow]

Fair enough: this is exactly what we've moved to on Gitter on Gitter since open-sourcing the product.