scaffold: warn user about gitignoring sensitive files