VSC DefaultEngine.ini and build/sign secrets

What is the best way to have VSC in your project (in my case git) and still be able to have build/sign secrets in the settings without having them being included in the version controlled?

Having DefaultEngine.ini version controlled is valuable but I don’t want commit Google Play keys and iOS profiles to git.