ignore deploy/secrets/