load secrets from .secrets.yml