github should give a warning automatically if someone commit something which may contain a password