moved secrets to a yaml file