updated README, making note of secrets.template.yml