This makes @benadida uneasy. We'll need a 3rd configurable secret.