ignore .pem files (AWS, etc)