rename hardcoded secrets filename
refactor. still untested.