crowdin: protect our config file

ensure no one accidently uploads our api keys