remove secrets from source code