return a 404 if the secret cannot be found