ignore secrets file
use secrets for keys