secrets not allowed in gitignore