no secrets in application.properties, adding to scm