adding secrets.yml