[Puppet Users] Where do you store sensitive files with puppet+git approach?

We use hiera-gpg for ours. Files containing sensitive information are
converted into templates so that only the necessary strings are included in
gpg. If we really needed to distribute full files I would probably build a
separate directory tree backed by its own repository for this. It's just
never been necessary for us.
different environments. Things are going pretty well, but now I have a
small issue. The question is where should I store sensitive files, for
instance SSL private keys or some files which contain sensitive data?
storing plain text strings rather than actual files - correct me if I am
wrong?
http://groups.google.com/group/puppet-users?hl=en.