move secret to local settings