Secret scanning

Also written: secret-scanning tools

Automatically searching code for keys, passwords and API keys before it is committed, as Alex's grep for API_KEY does by hand.