A credentials file, untracked and un-ignored, in a repo about to go public