Shouldn't we Store the secret in a configuration File Not visible to everybody, because it security constraints?