Keep secrets out of source in production