adapt deploy.rb to upload secret, use erb in new relic config