secrets.yml as per 4.1