use secret gists instead public