change api/secure to a one-element list.