README.md in cocoapods-keys-1.5.0 vs README.md in cocoapods-keys-1.5.1

- old
+ new

@@ -102,9 +102,13 @@ Will remove a key from a project. * `pod keys generate [optional project]` Will generate the obfuscated Objective-C keys class (mainly used internally). +#### Continuous Integration + +It's rarely a good idea to mess around with the keychain in your CI, so keys will look for an environment var with the same string before looking in the keychain. Also you could create a `.env` file in your project folder. + #### Security Key security is difficult. Right now even the biggest apps get their keys [leaked](https://threatpost.com/twitter-oauth-api-keys-leaked-030713/77597). This is neatly summed up by John Adams of the Twitter Security Team on [Quora](http://www.quora.com/Twitter-1/How-were-the-Twitter-iPhone-and-Android-OAuth-keys-leaked). > Putting this in the context of, "should you be storing keys in software", is more appropriate. Many companies do this. It's never a good idea.