rollback could occur during creation of user
add optional support for exporting the secret