Yeah, in a way I was being tongue in cheek about it. The truth is that internally they probably don't like using their own solution for key management. I usua

Yeah, in a way I was being tongue in cheek about it. The truth is that internally they probably don't like using their own solution for key management. I usually opt for environment variables for secrets, which I know isn't awesome, but keeps them out of code at least. Regardless, secrets should never ever be committed, even in a private repo (or one you think is private).