diff --git a/.gitignore b/.gitignore
index 6cb2c37..948309e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -43,6 +43,21 @@ Cpp2IL_CS/
 **/global-metadata.dat
 **/version.dll
 
+# TLS certs / private keys — never ship under any name
+*.pem
+*.key
+*.crt
+*.cer
+*.pfx
+*.p12
+*.jks
+*.asc
+*.gpg
+*.kdbx
+
+# Maintainer-side scrub tool — operates ON this repo, must not be IN it
+tools/scrub-for-public.ps1
+
 # OS
 .DS_Store
 Thumbs.db
diff --git a/README.md b/README.md
index 59c9b5f..df8afd8 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@ client; run a private server for yourself and your friends.
 
 > ⚠️ **Not affiliated with Rec Room Inc. or Against Gravity.**
 > See [DISCLAIMER.md](DISCLAIMER.md). DorkNet ships no Rec Room game assets or
-> modified binaries — you supply your own legally-acquired Rec Room 2020.03.10
+> modified binaries — you supply your own legally-acquired Rec Room 2020.12.18
 > install.
 
 ---