prepares final challenge: secret available at Secret.get