diff --git a/.gitignore b/.gitignore
index a150ccd..a914ffb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -6,3 +6,6 @@
 .zcompdump*
 *.zwc
 !apps.d
+!net.d
+secrets.d/*
+
diff --git a/.zshrc b/.zshrc
index 658bca9..be47815 100644
--- a/.zshrc
+++ b/.zshrc
@@ -8,31 +8,32 @@ mkdir -p "$ZDOTDIR/net.d"
 find "$ZDOTDIR/net.d" -name "*.zsh" -print0 | sort -z | while IFS= read -r -d $'\0' net; do source "$net"; done
 
 for S in \
-	05-start \
-	15-options \
-	25-history \
-	42-zinit \
-	45-plugins \
-	55-agents \
-	62-scripts \
-	65-vpy \
-	68-aliases \
-	72-widgets \
-	78-keybindings \
-	82-completion \
-	88-prompt \
-	95-finish
-do
-	N="${S//[0-9\-]/}"
-	if [[ -r "$ZDOTDIR/$S.pre.zsh" ]];  then source "$ZDOTDIR/$S.pre.zsh";  fi
-	if [[ -r "$ZDOTDIR/$S.zsh" ]];      then source "$ZDOTDIR/$S.zsh";      fi
-	if [[ -r "$ZDOTDIR/$S.user.zsh" ]]; then source "$ZDOTDIR/$S.user.zsh"; fi
-	if [[ -r "$ZDOTDIR/$N.user.zsh" ]]; then source "$ZDOTDIR/$N.user.zsh"; fi
-	if [[ -r "$ZDOTDIR/$S.post.zsh" ]]; then source "$ZDOTDIR/$S.post.zsh"; fi
+  05-start \
+  15-options \
+  25-history \
+  42-zinit \
+  45-plugins \
+  55-agents \
+  62-scripts \
+  65-vpy \
+  68-aliases \
+  72-widgets \
+  78-keybindings \
+  82-completion \
+  88-prompt \
+  95-finish; do
+  N="${S//[0-9\-]/}"
+  if [[ -r "$ZDOTDIR/$S.pre.zsh" ]]; then source "$ZDOTDIR/$S.pre.zsh"; fi
+  if [[ -r "$ZDOTDIR/$S.zsh" ]]; then source "$ZDOTDIR/$S.zsh"; fi
+  if [[ -r "$ZDOTDIR/$S.user.zsh" ]]; then source "$ZDOTDIR/$S.user.zsh"; fi
+  if [[ -r "$ZDOTDIR/$N.user.zsh" ]]; then source "$ZDOTDIR/$N.user.zsh"; fi
+  if [[ -r "$ZDOTDIR/$S.post.zsh" ]]; then source "$ZDOTDIR/$S.post.zsh"; fi
 done
 
 mkdir -p "$ZDOTDIR/apps.d"
 find "$ZDOTDIR/apps.d" -name "*.zsh" -print0 | sort -z | while IFS= read -r -d $'\0' app; do source "$app"; done
 
-# zprof
+mkdir -p "$ZDOTDIR/secrets.d"
+find "$ZDOTDIR/secrets.d" -name "*.zsh" -print0 | sort -z | while IFS= read -r -d $'\0' secret; do source "$secret"; done
 
+# zprof