dont push master secret to env :-)