Some integrations require information that must remain outside the public interface. I keep that distinction in mind when connecting a browser to a server-side service. A client-facing configuration should contain only what the browser actually needs.
Private settings belong outside publicly served folders and should be excluded from shared source packages. The same care applies to screenshots and setup documentation. A reusable project becomes easier to distribute when private configuration has a clear and separate place.