Managing secrets when you have pull requests from outside contributors
circleci.com