replace app_config.yml with secrets.yml