mention 'masterSecret' in push app reg.