fixup - move secrets