simplify _replace_secrets func to take page obj directly