diff --git a/.gitignore b/.gitignore
--- a/.gitignore
+++ b/.gitignore
@@ -19,8 +19,6 @@
 keyserver/*.env
 keyserver/*.env.*
 
-services/identity/target
-services/identity/secrets
 services/tunnelbroker/rust-lib/target
 services/tunnelbroker/tunnelbroker.ini
 
diff --git a/services/identity/.gitignore b/services/identity/.gitignore
new file mode 100644
--- /dev/null
+++ b/services/identity/.gitignore
@@ -0,0 +1,2 @@
+secrets
+target
diff --git a/services/identity/src/main.rs b/services/identity/src/main.rs
--- a/services/identity/src/main.rs
+++ b/services/identity/src/main.rs
@@ -34,6 +34,8 @@
     #[clap(default_value_t = String::from(SECRETS_DIRECTORY))]
     dir: String,
   },
+  /// Populates the `identity-users` table in DynamoDB from MySQL
+  PopulateDB,
 }
 
 #[tokio::main]
@@ -56,6 +58,7 @@
         .serve(addr)
         .await?;
     }
+    Commands::PopulateDB => unimplemented!(),
   }
 
   Ok(())