add optional secret prefix to prevent the bot from being hijacked by spammeers