removing secrets from code