fake secret key while I get this up and running