All keys are tracked in git&#x27;s history, so it&#x27;s a possible attack vector for hackers. You could use <a href="https:&#x2F;&#x2F;github.com&#x2F;sobolevn&#x2F;git-secret" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;sobolevn&#x2F;git-secret</a>. But beware, anytime you revoke someone&#x27;s access, you should regenerate all secrets stored in there. 
In any case you should always regenerate the keys whenever someone&#x27;s access is revoked