If your secrets are in your repo, you've probably already leaked them.