simpler secret config