yeah, or checked in even for us.  Others outside of edx who use it they would create their own private files in group_vars/ that override the default secure_dir that's set in group_vars/all.