moved secret key out of code