moved secrets back to settings