setup secrets.yml