secrets don't need filename prefix