move secrets to a separate config

2 jobs for morefix2