move :remove_secret to vars