null-secret is not allowed, use empty string