enabled feature flags: ci_secure_files, talisman installed as pre-receive hook