adding gnf-secrets as a submodule