replace app_config with secrets when linking from shared