this should be play-generate-secret I think