explicitly moving the .sensitive file out of the repo path
to emphasize sensitive information should not be in the repo