secrets.js not needed any more, server-prefs.json is now used to store runtime preferences