I can understand the desire to version control your secrets.

The bad idea was not to maintain the source in a separate repo that could easily be released.

If you want to keep the checkout process simple for your developers, maybe use git subtree for the overall project.