move password to secret