valid secret token or signature in bootstrap root link contract