diff --git a/credentials/.gitignore b/credentials/.gitignore
new file mode 100644
index 0000000..72e8ffc
--- /dev/null
+++ b/credentials/.gitignore
@@ -0,0 +1 @@
+*
diff --git a/credentials/README.md b/credentials/README.md
new file mode 100644
index 0000000..7c8e469
--- /dev/null
+++ b/credentials/README.md
@@ -0,0 +1,5 @@
+# credentials
+
+This directory contains credentials autogenerated by ansible during playbook
+runs, when they aren't already defined by some other means.
+