Is it safe to commit app.json file with google, Facebook signin keys or other sensitive data to private repository ?