What is .rnd file that appear after installing Laravel Passport at root? Does it contain any sensitive data? Should we commit it to repo?
In general the .rnd file is a file that contains random data used for creating unique secure certificates for laravel passport.
Next, you should run the passport:install command. This command will create the encryption keys needed to generate secure access tokens. ...
https://laravel.com/docs/5.8/passport#installation
When deploying Passport to your production servers for the first time, you will likely need to run the passport:keys command. This command generates the encryption keys Passport needs in order to generate access token. The generated keys are not typically kept in source control:
php artisan passport:keys