Securing configuration

Do you store sensitive information directly in your code? That's fine for development, but if you're pushing to source control or production, there's better way.