move secret to env