When fixing leaked credentials, you should rotate the keys before cleaning up the scene, because credentials in public commits have already been copied.