add secrets info to readme