Maybe moving out secret key to .gitignored file, so that you can't (by default) commit it?