Most incompetent coworker of the week made a pull request, title: "Adding secrets.ini needed to run $app."

He just copied it from the server and removed the `*.ini` entry in the .gitignore. Luckily he only had access to the dev instance (to copy passwords from).