doh. need to fake a secret key value if missing or shell commands will barf