08:14 <lhz> Using "bundle config url user:pass" for private gem server credentials, and after "bundle update my-gem" the credentials are added to the Gemfile.lock, which is in the git repo and I do not want credentials there, which is why I used "bundle config" in the first place. Any ideas how to fix this issue?

08:17 <Pupeno> Any ideas why bundler would install a particular gem with permissions 0600? http://stackoverflow.com/questions/23879123/bundler-installs-file-with-the-wrong-permission-on-deployment