Maybe a confidential-linter or git pre-commit hook would be nice to prevent leaking confidential information.