There should be an item regarding secrets in code: Good practice : - put your API keys and SSH keys in code. You will never forget them that way 😄 Bad practice: - encrypt sensitive values or keep them in a secret vault