add git-crypt gitattributes file
point all playbooks to secret file for passwords
add gitattribute for secret which is often ;) confused with private