add method for stripping secrets from Key
ci: disable sudo (use container stack)