hide settings.yml so can store api login info there