Test creds and exvcr

[kanishka]

For exvcr, how do people approach keep creds for their remote apis for use when regenerating cassettes in the test env.

1. Store creds in a gitignored test secrets file
2. Store creds in a key store like vault
3. Temporarily add creds to test config for cassette regeneration
4. Something else?