copy secrets in on deploy