[angryasian]

is the secrets.yml file not checked in to source control ?

[laserlemon]

No, it's not. The idea is that your should be able to (hypothetically) open source your app at any time without compromising any sensitive information.