Instead of doing this, might be a good idea to generate the secrets similarly to this so that nobody can do anything malicious.
Due to the nature of secret generation, @rnystrom would have to take this one on and instruct contributors to generate their own personal clientId/secret for their use.
I used to have this file checked in w/ some placeholders, then I moved it and all my secrets are out (oh no).
Cool script! I like this.