rm secret detection on sub apps