Unset secret setting in settings

This should not have a default, every site should set their own.