Now, that's the sensible approach, but we don' take too kindly to "sensible" 'round these here parts!

Jest aside, I see the point in doing this in cases where the company actually deals with very sensitive stuff, but in terms of average app developing company... meh... Most people are smart enough to know not to share keys and creds, and most people who hang around the ol' Slack channels for a meme and a laugh really don't care about said keys or creds.

In my case, I did my 6-year stint in full-on Corpo, then dipped from Start-up to Start-up, and it's always been the same story.