mark ebuild for gitlab-shell-2.4.0 as keyword -*, because there seems to be a bug in that version (upstream).
on the other hand, add gitlab-shell-2.3.1-r1 that symlinks the secret file instead of generating it.