strip and app secrets ignored