make usage of HOOK_SECRET_KEY optional