migrate from secret to secrets