change secret to use env variable