ignoring secrets so api keys and secrets will not accidentally get pushed