I usually have *secret in .gitignore and append .secret to any files with secrets.