Move sensitive settings to a install specific config file
example: https://github.com/colmoneill/Jason-Scraper/blob/master/main/settings_example.py
imported like so https://github.com/colmoneill/Jason-Scraper/blob/master/app.py#L29
Move email smtp settings, secret key, mongoengine confs, local db install confs, etc to stop publishing the confs publically