How do I prevent secrets from being uploaded to S3?

Possibly related: Feature Request: API Gateway Stage Variables