use a secret key