removes secrets from repo