removing secrets from git repos