metadata_proxy_shared_secret must be a secret