no secret now by default  (since the signature is optional in libshardcache as well)