never bust cache for packages containing 'cozy-secret-'