use static secret for travis builds, fixes pulls and forks