Is this really supposed to be a secret? If so, it would be better in a configuration repo or an environment variable, since this code is open source.