use settings module for secrets