create new secret and hide it