moves secret_key_base outside source control