# vault — sensitive credentials, never commit
*.env
*.secrets
*.key
*.pem