use pynacl for encrypting secret