force install deps in turn and force secret to string