Using a pre-commit hook, Talisman validates the outgoing changeset for things that look suspicious - such as tokens, passwords, and private keys.