hide secret.yml to git