Be safer about secret regex