diff --git a/.drone.yml b/.drone.yml
index 5ab620e..df117bb 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -26,6 +26,8 @@ steps:
   environment:
     HUGO_KEY:
       from_secret: hugo_key
+    HUGO_PUB:
+      from_secret: hugo_pub
     HUGO_USER:
       from_secret: hugo_user
     HUGO_HOST:
@@ -38,9 +40,10 @@ steps:
     - rm -rfv ./public
     - hugo --gc=true --minify
     - echo $HUGO_KEY > ./hugo_deploy
+    - echo $HUGO_PUB > ./hugo_deploy.pub
     - chmod -v 600 ./hugo_deploy
     - rsync -av -e "ssh -vv -o KexAlgorithms=curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group-exchange-sha256 -o PreferredAuthentications=publickey -o PubkeyAuthentication=yes -o PasswordAuthentication=no -c aes256-ctr,aes256-cbc -o StrictHostKeyChecking=no -i ./hugo_deploy" --delete public/ $HUGO_USER@$HUGO_HOST:$HUGO_DIR
-    - shred -zuv -n 7 ./hugo_deploy
+    - shred -zuv -n 7 ./hugo_deploy*
   when:
     status:
     - success