provide a default secret config file