add secret back --cached removes from repo