new key generate, add secret to gitignore