using a more sane secret