I think we should keep secret.h in noinst_HEADER (i.e., include it in the source tarball) regardless of what platform runs 'make dist'... we just don't want to build it.