take secrets and keys out of config