No, that is the value that will be hashed and added as `sign` to the cookie.
The secret is in the **value to sign** _(produced by the method `_sign_value`)_ to ensure, that an attacker do not simply calculate a new signature for the injected value.