moving secrets into it's own recipe