allow symbols or lambdas to be passed as :secret, fix up the secret if its too short