absolutely excludes client_secrets.json AND/OR client.json , wherever it exists