I'm glad I read the docs and found the canonical way to do this before inventing some custom thing!!
EDIT: I originally committed the actual secrets into this file, but since came back in git history and rewrote this commit to redact them! I wasn't expecting to share this repo, but now I am!
