add option to use a manually generated secret