Separate cli and secrets.