generate new secret on install