Migrate all secrets to config/secrets.yml