I had a longer talk with the rubygems.org people and their lacking org support and how we should handle secrets as vox pupuli