don't mess up secrets.json when env is pinned