Put config/secrets back into hiding; provide sample config for new pulls