ignoring /ve/
use secret_key instead