configure secrets