shared secret is not required