add #setup_secret_token and deps