&gt; Saying that you shouldn&#x27;t keep it on GitHub is different<p>I&#x27;d be willing to argue about that, but for my newrelic api key, a private github repo is sufficiently safe - even if I&#x27;d prefer if nobody starts having his servers report to my account.