encrypt secrets instead of ssh