diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 0000000..972e410
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+cfg/keys/*.keys filter=git-crypt diff=git-crypt
diff --git a/.gitignore b/.gitignore
index 645e516..6440bef 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
 cache
 log
-cfg/keys
+zones/secondary
 
 # these were local development things
 reference
diff --git a/zones/secondary/ogud.com b/zones/secondary/ogud.com
deleted file mode 100644
index 062a4ba..0000000
Binary files a/zones/secondary/ogud.com and /dev/null differ