allowing secrets into repo