diff --git a/.gitignore b/.gitignore
index 6e29cdd5..c8ff585e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,6 @@
+.*
+!.gitignore
 build/*
-.existdb.json
 modules/twitter-secrets.xqm
-.DS_Store
 expath-pkg.xml
 repo.xml
diff --git a/post-install.xql b/post-install.xql
index af5efbab..5a7a868c 100644
--- a/post-install.xql
+++ b/post-install.xql
@@ -58,6 +58,13 @@ let $resources :=
             <owner>twitter-agent:twitter-agents</owner>
             <mode>rwxrwsr-x</mode>
         </resource>
+        <resource>
+            <!-- We have removed guest access to this file, as it contains sensitive information  -->
+            <path>/db/apps/twitter/modules/twitter-secrets.xqm</path>
+            <type>file</type>
+            <owner>twitter-agent:twitter-agents</owner>
+            <mode>rwxrwx---</mode>
+        </resource>
     </resources>
 
 let $create-users :=