ops/secrets/ syntax: glob *.sw? *.pyc *.orig *~