Safely store secrets in Git for use by Puppet