secret key moved to .secret