move secrets out of the repository