Gitignore now excludes secrets.yml