fix secret validation