make secrets configurable
Use UUID to randomly setup the default secret value for each JVM 

Add note that it should be overridden by users for safety