Remove secret from .gitignore, add secret submodule