Check for .gitignore secrets in subdirectories

fixes #519