different secrets for each environment
automatically upgrade secrets.json