allow real settings to be secret