link config/secrets.yml on deploy