Ruby on Rails，Paperclip，Heroku，GitHub和AWS - 保护密钥

I'm using RoR hosted by Heroku and I'd like to store files on s3 using paperclip. My source code is hosted on github and is world readable. What is the best practice to keep the keys a secret from the rest of the world?I'm using RoR hosted by Heroku and I'd like to