don't store secret keys in the repository