made secrets secret and added them to environment variables
origin still had unhidden keys