I keep important settings like the hostnames and ports of development and production servers in my version control system. But I know that it's bad practice to keep secrets (like private keys and database passwords) in a VCS repository. But passwords--like any other setting--seem like they should be versioned. So what is the proper way to keep passwords version controlled? I imagine it would invol