Change secrets.yml to read from ENV so file can be public