put secure travis env vars in the right place