Comment by wendyshu

> Your source code repo should never contain secrets like API keys.

Why not?