version control - A good way to manage cryptographic keys? -
what's canonical way manage cryptographic keys associated particular source code? (e.g. ssh or rsa key pairs associated particular program). i reluctant check version control obvious reasons, don't want them reside on few people's local hard drives either. you put them version control encrypted, , let few people know password. has advantage stored along code , can update them easily, files useless attacker (providing use strong password).