I'm writing a Python application that utilizes the Tumblr API and was wondering how I would go about hiding, or encrypting, the API key. 
Github warns against pushing this information to a repo, so how would I make the application available to the public and still follow that policy?
Why do you need to post your API key? Why not post your app code to Github without your API key and have a configuration parameter for your users to add their own API key?
API key encryption for Github?