Move secrets to .env file