travs ci: 'secure' should be child of 'env'