== 1. too open (chmod 644): must refuse
REFUSED: trial/settings.secret is accessible by others (mode 0644). Run: chmod 600 trial/settings.secret
exit code: 1
== 2. private (chmod 600): loads, log shows asterisks
INFO loaded 1 secret(s) from trial/settings.secret: API_KEY=********
exit code: 0
== 3. key appears in exactly one place
files containing key: ./trial/settings.secret 
total occurrences: 1
== 4. git ignores the file
.gitignore:3:*.secret	trial/settings.secret
settings.secret files git would add: 0
