update instructions to reflect secrets.yml option
update lock