stop tracking secrets.js so I can add my apps api keys