add secret file for env