Encrypt credentials. Commit them before pushing to heroku.