existing ks should not be sent on get secrets api call