Move secrets to ENV variables