secret token no longer tracked in version control