You should store secret data in the same version control repository as your Terraform configuration.