see .gitignore for those files which DO contain the secret passwords