Having team-wide rules that prevent credentials from being stored as code is a great way to police bad actions in your existing developer workflow.