@worldsendless
I accidentally had .authinfo in a dotfiles git repo at work. Secret scanning finally noticed and yelled at me. Ooops.
@Sdowney @worldsendless totally agree on both.
I have my full emacs config including Elpa packages in my repo. If something brakes you can easily roll back to a working state. New laptop? Up to speed within an hour.
As useful as gpg is it requires some research.
https://www.bundesbrandschatzamt.de/~baron/blog/20211010-gpg.html