Doesn&#x27;t the OP say that secrets aren&#x27;t allowed to be stored unless they&#x27;re in the gitignore file? Does this mean they&#x27;re somehow not storing the secret&#x27;s history? Say by rewriting the history of those particular files in the .gitsecrets file every time they&#x27;re committed so they&#x27;ve only got the lastedt version?