Revamp Security stuff

[avahoffman]

• Don't push to github
• don't put passwords somewhere
• always ask CBO about if there are any sensitivities , make it clear you are thinking about it.
• example of CBO giving data that was sensitive and how to push back