Because the advice "don't check your secrets into source control and then push them to a public repository" advice exists far more than any practical solutions to the problem, here's how