found the secret by bruteforce