can we only delete it if there are secured variables? or maybe we can pass the secured version and decrypted version to the worker/travis-build and then it can check if the job is a PR job and decide what to do?