use secrets.yml (globalid seems to need this)