remove sensitive fields in config.yml