fix the secrets nonsense
fixes #1 -- generate settings on the fly with json