allow secrets and secret_token to be on git-hub