more robust handling of secrets for dev