notice about config/secrets.yml