Place private API keys outside of source control, and use them as needed for digitaloceam or aws