put secrets in external file