rename "spm" => "secpass"