Put secrets and keys in config_vars.yml, load them in development and test environments only. Dont push to git hub