move secret things out of the script