hide secret from output and fix syntax in install_web