hide secret and reset API key