Move secrets to env

any further inputs?