move secure script to bldr and travis