secret token on peer root rather