Rails already solved this with credentials files...