using secrets.yml again