git grep -nE 'API_KEY=|SECRET=|BEGIN RSA PRIVATE KEY' -- ':!*.lock' || true