I am using Drupal 8 and
drush cex to commit my configuration to my repository.
However, I want to keep passwords and API keys out of the repository. How do I do that? (selectively exclude sensitive information from configuration management).
For example, I'm using the SMTP module, but I noticed that in addition to the SMTP server and sender's name, etc., it also exports the API key to code, which should not be exposed. I want to manage module configuration with configuration management, but I don't want to commit the key.