secret bypass size limitation