actually removes secrets