wrap secure tokens in string in travis.yml