update secrets.yml for better security