refactor to use secret_cred.py