add secret key, since we'll probably eventually need it