Detection is done through pre-commit with the
hooks detect-private-key and detect-api-key.