A secret hardcoded to be 'secret' isn't very secret.  Should this be configurable?