secret keys now sourced in the post_deploy step as well