I am guilty of this one.
I was 30 minutes from a presentation, and couldn't figure out why my code couldn't get the key from the hosting service.
So I just hard coded the key. The key was rotated after the presentation.
Does not look very good on a repo.