upload secrets.yml before migrations