Secret push protection is now enabled. After a test period, this has been enabled instance-wide to avoid pushing tokens and common configuration files by mistake.