move secret key base to config