prevent commiting secret stuff to repo