- generate decryption step - skip job for PRs - remove transfer.sh support - deploy every (master) commit