yml: fix the secure variable