fixed tests
tests: be verbose on failed jobs
harden secret files permissions
ensure secret key is fresh