1 files changed, 5 insertions, 0 deletions
diff --git a/README b/README
index f50f0b2..6a93a77 100644
--- a/README
+++ b/README
@@ -45,3 +45,8 @@ man env
 
 # Shell built-ins take precedence over any external program with the same name.
 ```
+
+Just like the Internet, anything sensitive that git tracks is a pain to remove.
+To remove it, the git history has to be rewritten.  If others had cloned the
+repository they'll need to re-clone it.  And at that point, the commited secrets
+are already compromised.