exclude .pem from repo