Disclosure of S3 secret access key

[pfaffman (Jay Pfaffman)]

You can set them in the app.yml file and have them not show up in settings. Docker deployment with custom site_settings.yml provides hints