if you're uncomfortable storing them there, you're going to rotate all the secrets after you move the repo to keybase, right?