8.7Don't put secrets into normal configuration

This is bad:

salesforce:
  clientId: "abc123"
  clientSecret: "SuperSecretPassword!"

and then:

git add .
git commit
git push

Now the secret exists forever in repository history.

Instead, use secure configuration or an external secret mechanism.