Fixes security issue 

xmas.php uses user-input to route functions.. found function show_source
literally gave up pretty-printed source of any file.. 

/xmas/source/secrets_deploy.php == GAPING SECURITY HOLE.