secrets.yml moved to config folder