update instructions to reflect secrets.yml option