remove secret/key from codebase