@jonas thanks for the response, my follow-up questions are not judging but trying to understand the needs. What is the purpose of leaving them off the git repository? Is there a potential for the secrets to be used/abused higher than being obfuscated in the .tar.xz until they are found there?