allow empty secret