refactor to secretstash