Minor Description
to avoid accidentally checking in secrets, I keep auth keys for things like AWS in file called auth-keys.xml alongside the test/resources/core-site.xml file, then XInclude them. I also have a global gitignore set up ignore files with that name.
I propose having a standard name for XML files containing such secrets (we could use auth-keys.xml or something else, and set up hadoop-trunk/.gitignore and svn:ignore to ignore them. That way, nobody else will check them in by accident