[mail] move sensitive info to config.