gitignore for client secrets