secure the secret file with chmod 0600