.gitignore for NPM
Ignore PEM files; don't commit SSL/TLS secrets