add getter/setter for secret if qr doesnt work