> Nobody ever commits a private TLS key to a GitHub repo

Oh how I wish this were true...