moved secret phrase to untracked config file