new secrets and in env vars