ignore chef encrypted data bag secret
ignore more ca-certificates generated content