update secrets loader & cleanup