If I create a repo on github and include a secrets.js file in my project and include it in my .gitignore file and store all of my "secrets" in it, am i correct to