move secret key to new secrets.yml file