A red team might well notice that the build process doesn't check for accidentally committed secrets.