Feature Request: Variables that are only accessible for builds of master branch

HI, GitLab CI is awesome. However when developing open source modules it is a huge security risk that I can't control code (for example in merge requests) before it runs with access to secret variables that then enable automatic publishing to e.g. npm.

It would be a huge plus if I could choose to have some of them only available in master branch builds.