The `exim-config' and `firewall' submodules contain complicated m4-based
per-host configuration which already exist as separate projects. (They
might get pulled in-tree at some point, but probably not.)
The `secrets' submodule contains Ansible variable definitions for
secrets which can't be published in the main repository.