ensure secret is unique