SSRF and secret key disclosure found on Turbonomic endpoint