I think this is worrying more about things like database passwords and API keys used by your application.