making app.yaml private