{
  # populate secrets on a per-machine basis below (and don't push changes to this file to git)
}