Bonus points if you exfiltrate config/initializers/secret_token.rb.