I would suggest to not check in the credentials to the public bzr branch as bots can pick it up, this should be concealed using the environment variables or if we can find a way to encrypt them at check in time and decrypt it when these were needed for the setup (like travis)
I would suggest to not check in the credentials to the public bzr branch as bots can pick it up, this should be concealed using the environment variables or if we can find a way to encrypt them at check in time and decrypt it when these were needed for the setup (like travis)