.gitignore excludes sensitive files