[stouset]

Also, just swear of ever committing secrets to a repo to begin with. It's a bad idea, period.

[StavrosK]

There are many times when that isn't doable. Fortunately, you can swear off ever committing plaintext secrets to a repo. I use git-crypt:

https://github.com/AGWA/git-crypt