don't track secrets.yml
don't track these
npomatters