generate new secret - and hide from repo