fix README
default all secrets to an empty string