add domain:all to secret