add encrypted secrets