Using conf for secret instead of hardcoded