fix up secrets to match configuration