A key committed by mistake

• A

  Remove it in a follow-up commit, since the key is then no longer in the current code

• B

  Treat the key as compromised and replace it, whatever is done about the history

• C

  Rewrite the history to erase it, which removes the exposure

• D

  Make the repository private, which prevents anyone else from reading it