Also, it looks like [Rails 4.1 will finally make this more secure by default.](http://edgeguides.rubyonrails.org/4_1_release_notes.html#config-secrets-yml)  :lock: :grinning: