secret key is now read from file