Move all "Secrets" into secrets.yml (closes #445)