adds secrets to repo