Haha it seems the motto should instead be &quot;get <i>some pointers to</i> your secrets into source control&quot;. This makes the tool much less vulnerable to the abuse I was envisioning, but also pushes it into &quot;so what?&quot; territory for me. I can already save pointers to secrets in my code; this is another layer of configuration for dubious benefit.