use secrets.yml instead of env_config.yml