yes, indeed I am. I&#x27;m all in favor of keeping the tools used to a level where the effort makes sense to protect the value of the goods. I totally could lock up my newrelic api key in a bank safe, double encrypted with two persons 4096 bit GPG keys, but that would be a little overkill, wouldn&#x27;t it? Do you do that? I&#x27;d be moderately annoyed if somebody started pushing false metrics to my NR account, but that&#x27;s about all the damage they could do with the information in that repo. So what level of effort would you propose?