Make secrets.yml environment based; enforce code reuse for common parts