passwords not on github, in a private config file