Keep the secret key out of the repo