load secrets from somewhere else