[StavrosK]

There are many times when that isn't doable. Fortunately, you can swear off ever committing plaintext secrets to a repo. I use git-crypt:

https://github.com/AGWA/git-crypt