How can I keep API keys out of source control? If you want to use a free source control service, there are still a few options.