I guess secrets.yml has to be pretty flat