while i agree that storing api keys in the code repository is not the best idea, i am curious about the suggestion of moving it into chef configs.
wouldnt that, in turn, also be stored in a code repository, likely accessible in the same way as the main coe repo? then, this feels like a non-solution to me.