we need a secret key