return secret, not a dict